Sign inConnect your agent
infochanged

Cloudflare Fundamentals, Cloudflare One, Cloudflare Tunnel for SASE, Cloudflare Tunnel - Granular Tunnel Read And Monitor role is generally available

Announced
Tags
Cloudflare-Fundamentals, Cloudflare-One, Cloudflare-Tunnel-for-SASE, Cloudflare-Tunnel
Severity
info, set by reef/rss-rule-v1
Source
https://developers.cloudflare.com/changelog/post/2026-10-22-granular-read-and-monitor-ga/

<p>The <strong>Cloudflare Tunnel - Granular Connector cloudflared Read And Monitor</strong> role is now generally available. You can grant a member read access and log streaming for specific <a href="https://developers.cloudflare.com/tunnel/">Cloudflare Tunnel</a> instances without granting write access or access to every Tunnel in your account.</p> <p>This role includes the same access as <strong>Cloudflare Tunnel - Granular Connector cloudflared Read</strong>: viewing selected Tunnels, their IP and hostname routes, and connector host details. It also grants <a href="https://developers.cloudflare.com/tunnel/observability/#remote-log-streaming">remote log streaming</a>, so support operators can troubleshoot a Tunnel without changing its configuration. The existing <strong>Read</strong> role does not grant log streaming access.</p> <p>To assign the role, follow <a href="https://developers.cloudflare.com/tunnel/guides/granular-permissions/#grant-a-granular-permission">Grant a granular permission</a>. For the available roles, refer to the <a href="https://developers.cloudflare.com/fundamentals/manage-members/roles/#resource-scoped-roles">resource-scoped roles reference</a>.</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.